SWS Vulnerability Watch

Back to findings

CVE-2026-106323 in Google Chrome latest

Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Severity
Critical 9.6
Exploitation
0% chance of exploit
in the next 30 days
Fix
Update to 155.0.8059.39
Where
Workstation tool
How it matched
Recent CVE for this product – check your installed version
First seen
2026-11-05 01:13:58 UTC
Source
https://nvd.nist.gov/vuln/detail/CVE-2026-106323